Well you can’t sign new certs (with the current date) with an expired root/intermediate cert, but the root/intermediate cert expiring doesn’t strictly invalidate the already signed certs.

But I was more talking about the end-user certificates in the previous comment.

Yeah, my understanding was they’re not issuing new certificates, but the current ones are still valid until they’ve expired.

FYI, G3 is the only one listed with the issue, the others are fine AFAIK. But if you don’t trust eMudhra at all after that, then that’s fair.

Edit: Actually it’s the intermediate certs that are compromised, the roots are still fine, but many of them come from the G3 root cert (and Sectigo’s AAA Certificate Services)

Source: https://emudhra.we-have-a-problem.com/